similar to: Proper sysvol permissions

Samba 4.8.2 as AD controller, installed from scratch (no upgrade). I am getting "access denied" for GPO objects and netlogon or sysvol shares both on Win7 and W10 clients. [root at ad1 etc]# ll /usr/local/samba.ad/var/locks/ total 1384 -rw------- 1 root root 421888 May 17 08:30 account_policy.tdb -rw------- 1 root root 528384 May 17 08:30 registry.tdb -rw------- 1 root root 421888

(sorry for not threading, still getting no mails from  samba list) Ad rights on samba directories: # rm -rf /usr/local/samba.ad # cd /usr/src/samba-4.8.2 # make install (no dirs in /usr/local/samba.ad/var/locks/ at this point) # /usr/local/samba.ad/sbin/samba-tool domain provision --use-rfc2307 -- interactive       realm: NEMUH.CZ       netbios: UHN    ... # ll

 Does anybody know any answer in this topic, please?  Michal ---------- Původní e-mail ---------- Od: Michal via samba <samba at lists.samba.org> Komu: samba at lists.samba.org Datum: 4. 7. 2018 8:58:45 Předmět: [Samba] classicupgrade questions "I am trying to do a classicupgrade.  (This is not 1st try, I went through it once time already; then I deleted all data and trying it

---------- Původní e-mail ---------- Od: Rowland Penny <rpenny at samba.org> Komu: samba at lists.samba.org Datum: 25. 6. 2018 13:22:57 Předmět: Re: [Samba] Proper sysvol permissions "On Mon, 25 Jun 2018 13:05:08 +0200 (CEST) Michal via samba <samba at lists.samba.org> wrote: > (sorry for not threading, still getting no mails from  samba list) This is very probably a

I am trying to do a classicupgrade.  (This is not 1st try, I went through it once time already; then I deleted all data and trying it again, with questions now.) Command samba-tool domain classicupgrade --dbdir=/etc/samba.PDC/ --realm=ad.nemuh.cz --dns-backend=BIND9_DLZ /etc/samba.PDC/smb.PDC.conf Problem a) ... init_sam_from_ldap: Entry found for user: pc0027$ init_sam_from_ldap: Failed to

2018-07-24 23:26 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 24 Jul 2018 22:50:16 +0200 > Michal <Michal67M at seznam.cz> wrote: > > > 2018-07-24 16:53 GMT+02:00 Rowland Penny via samba > > <samba at lists.samba.org>: > > > > > > Do the users have a gidNumber attribute containing the gidNumber of > > >

On Wed, 25 Jul 2018 22:40:25 +0200 Michal via samba <samba at lists.samba.org> wrote: > ---------- Forwarded message ---------- > From: Majkl Majkl <themajklthe at gmail.com> > Date: 2018-07-25 22:28 GMT+02:00 > Subject: Re: [Samba] Force set group id on samba domain member > To: Rowland Penny <rpenny at samba.org> > Cc: "samba at lists.samba.org"

---------- Forwarded message ---------- From: Majkl Majkl <themajklthe at gmail.com> Date: 2018-07-25 22:28 GMT+02:00 Subject: Re: [Samba] Force set group id on samba domain member To: Rowland Penny <rpenny at samba.org> Cc: "samba at lists.samba.org" <samba at lists.samba.org> 2018-07-25 9:19 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: >

2018-07-25 22:57 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 25 Jul 2018 22:40:25 +0200 > Michal via samba <samba at lists.samba.org> wrote: > > > ---------- Forwarded message ---------- > > From: Majkl Majkl <themajklthe at gmail.com> > > Date: 2018-07-25 22:28 GMT+02:00 > > Subject: Re: [Samba] Force set group id on

Am Mittwoch, 4. Juli 2018, 08:55:19 CEST schrieb Michal via samba: My mailer (kmail) is broken... > b) After upgrade, a lot of imported users in AD have "account > disabled". One of them, as far as I can remember, was user "anger": > dn: uid=anger,ou=People,dc=nspuh,dc=cz > objectClass: shadowAccount > objectClass: person > objectClass: inetOrgPerson >

I am in a process of moving from NT4 domain to AD domain. And I did exactly what should not be done, I run AD on the production network. Now clients (Win7 and Win10) can not see old NT4 domain controller. What exactly I did:   - exported production LDAP data of our  domain called "NIS" and started new LDAP server with that data on new linux server, called ad1   - copied samba config

Samba DM config below. Directories with setgid: $ll /home4/group total 32 drwxrws--- 7 NIS\nisadmin NIS\audio 4096 Jul 24 14:14 audio drwxrwx--- 2 NIS\nisadmin NIS\dok-sprava 4096 Jul 21 09:23 dok-sprava drwxrwx--- 2 NIS\nisadmin NIS\poj 4096 Jul 23 08:38 poj drwxrwx--- 2 NIS\nisadmin NIS\projekty 4096 Jul 23 09:14 projekty When user creates file/dir directly on linux, the

Am Mittwoch, 4. Juli 2018, 08:55:19 CEST schrieb Michal via samba: > I am trying to do a classicupgrade. (This is not 1st try, I went > through it once time already; then I deleted all data and trying it > again, with questions now.) Long Story. I will try to describe your problem as short as possible > Command > > samba-tool domain classicupgrade --dbdir=/etc/samba.PDC/ >

On Tue, 24 Jul 2018 14:38:31 +0200 Michal via samba <samba at lists.samba.org> wrote: > Samba DM config below. > Directories with setgid: > > $ll /home4/group > total 32 > drwxrws--- 7 NIS\nisadmin NIS\audio 4096 Jul 24 14:14 audio > drwxrwx--- 2 NIS\nisadmin NIS\dok-sprava 4096 Jul 21 09:23 dok-sprava > drwxrwx--- 2 NIS\nisadmin NIS\poj 4096 Jul 23

Am Dienstag, 24. Juli 2018, 14:38:31 CEST schrieb Michal via samba: > Samba DM config below. > Directories with setgid: > > $ll /home4/group > total 32 > drwxrws--- 7 NIS\nisadmin NIS\audio 4096 Jul 24 14:14 audio > drwxrwx--- 2 NIS\nisadmin NIS\dok-sprava 4096 Jul 21 09:23 dok-sprava > drwxrwx--- 2 NIS\nisadmin NIS\poj 4096 Jul 23 08:38 poj > drwxrwx---

For being honest, in my previous tests this user's (user test1) new files was created with NIS\audio group as extected; but other user's files (user amistest) was created with "NIS\domain users" group (in the same "audio" directory). This lasted a few days. It looked like drwxr-sr-x 2 NIS\amistest NIS\audio 4096 Jul 24 08:17 amistestdir drwxrwsr-x+ 2

> This is problem. We used to be able get "public" data from ldap "> without authentification (password attributes can not be read without > user bind, of course). Is there any way how to do it? Yes, but before I tell you, why do you feel you need to do this, what are you searching for ? "     We use GroupOffice and it is configured to use LDAP; it is looking up

Am 16.06.2017 um 19:17 schrieb Rowland Penny via samba: > On Fri, 16 Jun 2017 13:58:20 -0300 > "Carlos A. P. Cunha" <carlos.hollow at gmail.com> wrote: > >> :-| >> >> ls -lnd /opt/samba/var/locks/sysvol >> drwxrwx---+ 3 0 3000000 4096 Jun 16 13:56 /opt/samba/var/locks/sysvol >> >> > > I have this sinking feeling that you have

2018-07-24 16:53 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 24 Jul 2018 15:57:46 +0200 > Michal <Michal67M at seznam.cz> wrote: > > > For being honest, in my previous tests this user's (user test1) new > > files was created with NIS\audio group as extected; but other user's > > files (user amistest) was created with

Command: samba-tool domain classicupgrade --dbdir=/etc/samba.PDC/ --realm=nemuh.cz -- dns-backend=BIND9_DLZ /etc/samba.PDC/smb.PDC.conf ...a lot of lines... and: Following names are both user names and group names:    radix    lekarna    vema    dss    vydejzp    nagios    doprava    audio ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: